On Tue, 22 Sep 2026 12:40:58 -0700 Stephen Hemminger <[email protected]> wrote:
> The secret option was described as a security option, which invites > using it as one. It is sent in cleartext in the connection request, > and when passed as a device argument it is visible to other local > users in the process arguments. > > Describe it as what it is, a check against connecting mismatched > interfaces, and document what actually restricts access to an > interface. By default the control socket is in the abstract > namespace and has no filesystem entry to own or permission. Only > with socket-abstract=no do file permissions and the owner-uid and > owner-gid options apply. > > Signed-off-by: Stephen Hemminger <[email protected]> > Tested-by: Sriram Yagnaraman <[email protected]> > --- Recheck-request: aws-unit-testing
